Compliance
Every approval, connection and audit, in one place.
What we are certified against, which authority gateways we are live on, where your data sits, and when each one is next reviewed.
Your region
Set from your IP, and changeable here. The marks below are the approvals that apply where you are.
MOHAP DoH Abu Dhabi Malaffi Shafafiya Muashir ADHICS Tatmeen
Registered, certified, connected
Abu Dhabi, UAE — the approvals that apply where you are.
Registry
What holds, for which product, until when.
Each entry names the products it covers, the body that issued it and the next review date.
CONNECTION
APPLIES TO
ISSUING BODY
NEXT REVIEW
Malaffi health information exchange
EzPOS · EzRx · EzDx
DoH Abu Dhabi
CURRENT 00/00
NABIDH health information exchange
EzPOS · EzRx · EzDx
DHA
CURRENT 00/00
Riayati national health record
EzPOS · EzRx · EzDx
MOHAP
CURRENT 00/00
Shafafiya & DHPO e-claims
EzPOS · EzRx · CCMS
DoH Abu Dhabi / DHA
CURRENT 00/00
NPHIES claims & eligibility
EzPOS · EzRx · CCMS
NPHIES, KSA
CURRENT 00/00
Tatmeen & RSD track and trace
EzPOS · e-Inventory
MOHAP / SFDA
CURRENT 00/00
UPP reimbursement
EzPOS · e-Inventory
DoH Abu Dhabi
CURRENT 00/00
ZATCA e-invoicing
AMS · EzPOS
ZATCA, KSA
CURRENT 00/00
ADHICS controls
All products
DoH Abu Dhabi
ALIGNED —
ADHICS is a control framework, not a vendor certification — there is no certificate to hold. The evidence is the audits: our systems have been through more than 5,000 customer audits with no findings raised against the software.
Data and security
Where the data lives and who can reach it.
Hosting, encryption, retention, and the route for a data request.
Residency
Your database sits on your own server, in your own facility. Nothing about a day at the counter depends on a link to us.
Access control
Roles and rights per user, a full activity and login log, an ADHICS-aligned password policy and multi-factor sign-in. Support access is requested, logged and time-limited.
Continuity
Encrypted automatic daily backups, manual snapshots on demand, tested restores, and the offline mode that keeps the counter dispensing when the line drops.
Reporting a concern
Where to send a suspected vulnerability, who reads it, and how long we take to reply.
Documents
Security overview (PDF) DPA template Sub-processor list Penetration test summary
Questions
What procurement usually asks.
Short answers, each naming the document that backs it.
Where is our data stored, and can we get it out?
On your own server, in your own facility — the products run against an on-premises database, which is also why the counter keeps working when the connection does not. Encrypted backups run nightly, you can take a manual one at any time, and a full export is a support request rather than a negotiation.
Is anything hosted by you rather than by us?
Only if you choose it. Groups running centralised claims can have the central claims database in cloud we host and manage, which is what lets a back office reach every branch without a VPN into each pharmacy. Everything else stays on site.
What happens when an authority changes a rule mid-contract?
We build the change and ship it in a release before the deadline, at no extra cost — that has been the arrangement since 2005. Tatmeen, UPP, NPHIES and ZATCA all arrived this way.
Are you certified against ADHICS?
No, and neither is anyone else — ADHICS is a control framework for healthcare providers, not a vendor certification scheme. Our software is built to those controls, and our systems have been part of more than 5,000 customer audits with no findings raised against the software.